Date: Mon, 8 Apr 1996 17:20:34 +0000 () From: Pedro A M Vazquez <vazquez@IQM.Unicamp.BR> To: branson@longstreet.larc.nasa.gov (Branson Matheson) Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Violently pulling out my hair Message-ID: <199604081720.RAA05348@kalypso.iqm.unicamp.br> In-Reply-To: <199604081558.LAA02702@longstreet.larc.nasa.gov> from "Branson Matheson" at Apr 8, 96 11:58:40 am
next in thread | previous in thread | raw e-mail | index | archive | help
Hmm It works for me: ortro# tcpdump ether host 8:0:20:8:e5:d7 tcpdump: listening on ed0 20:18:47.881743 arp reply sphigx.iqm.unicamp.br is-at 8:0:20:8:e5:d7 20:18:47.882320 styx.iqm.unicamp.br > sphigx.iqm.unicamp.br: icmp: echo request 20:18:47.882868 arp who-has styx.iqm.unicamp.br tell sphigx.iqm.unicamp.br 20:18:47.883392 arp reply styx.iqm.unicamp.br is-at 0:40:c7:57:c3:9d Pedro Branson Matheson said: > > Ok... tcpdump manpage gently describes the wonderful way to montior > packets from an ethernet address as follows: > > ether host ehost > True if either the ethernet source or destination address is > ehost. > > So I tried: > > root@garion > tcpdump ether host gw.hq.ferg.com > tcpdump: only ethernet/FDDI supports link-level host name > > Grrr... > > OK.. there IS an entry in my ethers file.. looks like: > > 08:0:3e:0:24:f3 gw.hq.ferg.com > > Allright so next i tried... > > branson@garion #tcpdump ether host 08:00:09:d4:65:ff > tcpdump: ethernet address used in non-ether expression > > This is really frustrating.. can any one help? > > -branson > > -- > ======================================================================== > branson matheson | branson@widomaker.com > Ferguson SysAdmin | http://widomaker.com/~branson >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199604081720.RAA05348>